summaryrefslogtreecommitdiffstats
path: root/dom/base/crashtests/605672-1.svg
blob: b929b2669123b16d796d270f27f30d971aaf2ee0 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">

<script>
function boom()
{
  var fr = document.createElementNS("http://www.w3.org/1999/xhtml", "iframe");
  fr.src = "data:text/html,X";
  document.documentElement.appendChild(fr);
  var docType = fr.contentDocument.implementation.createDocumentType(undefined, "", "");
  document.removeChild(document.documentElement);
  document.appendChild(docType);
}

window.addEventListener("load", boom, false);
</script>

</svg>